{"action":"created","issue":{"url":"https://api.github.com/repos/qbittorrent/qBittorrent/issues/1376","repository_url":"https://api.github.com/repos/qbittorrent/qBittorrent","labels_url":"https://api.github.com/repos/qbittorrent/qBittorrent/issues/1376/labels{/name}","comments_url":"https://api.github.com/repos/qbittorrent/qBittorrent/issues/1376/comments","events_url":"https://api.github.com/repos/qbittorrent/qBittorrent/issues/1376/events","html_url":"https://github.com/qbittorrent/qBittorrent/issues/1376","id":26830667,"number":1376,"title":"[Wishlist]Digitally Sign The Installer","user":{"login":"ghost","id":10137,"avatar_url":"https://avatars3.githubusercontent.com/u/10137?v=4","gravatar_id":"","url":"https://api.github.com/users/ghost","html_url":"https://github.com/ghost","followers_url":"https://api.github.com/users/ghost/followers","following_url":"https://api.github.com/users/ghost/following{/other_user}","gists_url":"https://api.github.com/users/ghost/gists{/gist_id}","starred_url":"https://api.github.com/users/ghost/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ghost/subscriptions","organizations_url":"https://api.github.com/users/ghost/orgs","repos_url":"https://api.github.com/users/ghost/repos","events_url":"https://api.github.com/users/ghost/events{/privacy}","received_events_url":"https://api.github.com/users/ghost/received_events","type":"User","site_admin":false},"labels":[{"id":11309637,"url":"https://api.github.com/repos/qbittorrent/qBittorrent/labels/Windows","name":"Windows","color":"0b02e1","default":false},{"id":11319735,"url":"https://api.github.com/repos/qbittorrent/qBittorrent/labels/Wishlist","name":"Wishlist","color":"DDDDDD","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":12,"created_at":"2014-02-03T19:36:42Z","updated_at":"2017-12-08T04:41:10Z","closed_at":null,"author_association":"NONE","body":"Windows 7 Home Premium 32bit\nqBittorrent v.3.1.5\n\nHI!\nI have to admit, that in the websites downloads page:\n\nhttp://www.qbittorrent.org/download.php\n\nwhen we see the SHA-1 Checksum, we smile.\nBut there is another thing, that you could do, which would bring ever bigger smiles.\nDigitally Signing the Installer.\nI dont know exactly the specifics, but I think that after the installer is signed, when downloaded and installed in the PC, then all the files included in the installer, are digitally signed too. So, if installed in the default location, C:\\Program Files\\qBittorrent\\, then by going to that folder, all the files would be digitally signed. (And actually I see now that there are not so many files there, just 4, and then the files in the subfolder: translations. A I forgot the others that get installed in the AppData subfolders.)\nThe digital signing of all those files, can be confirmed, by right clicking those files, and selecting the tab: Digital Signatures. There, we can see information of the signer and the signature etc.\nExample:\n\n![capture3](https://f.cloud.github.com/assets/6562802/2068546/32546310-8d0c-11e3-90c6-4576b6005e87.JPG)\n\nCurrently, we see this:\n\n![capture](https://f.cloud.github.com/assets/6562802/2068422/0b45c2f2-8d0a-11e3-98a8-373fec1079f4.JPG)\n\nAnother nice thing if digitally signed, is that if submitted to VirusTotal, then on the analysis, under the File Detail, it shows nicely a green icon and the signature information:\n\n![capture2](https://f.cloud.github.com/assets/6562802/2068456/77633c62-8d0a-11e3-8e35-ebbc4482acd6.JPG)\n\nCHEERS!\n"},"comment":{"url":"https://api.github.com/repos/qbittorrent/qBittorrent/issues/comments/350170688","html_url":"https://github.com/qbittorrent/qBittorrent/issues/1376#issuecomment-350170688","issue_url":"https://api.github.com/repos/qbittorrent/qBittorrent/issues/1376","id":350170688,"user":{"login":"Chocobo1","id":9395168,"avatar_url":"https://avatars2.githubusercontent.com/u/9395168?v=4","gravatar_id":"","url":"https://api.github.com/users/Chocobo1","html_url":"https://github.com/Chocobo1","followers_url":"https://api.github.com/users/Chocobo1/followers","following_url":"https://api.github.com/users/Chocobo1/following{/other_user}","gists_url":"https://api.github.com/users/Chocobo1/gists{/gist_id}","starred_url":"https://api.github.com/users/Chocobo1/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Chocobo1/subscriptions","organizations_url":"https://api.github.com/users/Chocobo1/orgs","repos_url":"https://api.github.com/users/Chocobo1/repos","events_url":"https://api.github.com/users/Chocobo1/events{/privacy}","received_events_url":"https://api.github.com/users/Chocobo1/received_events","type":"User","site_admin":false},"created_at":"2017-12-08T04:41:10Z","updated_at":"2017-12-08T04:41:10Z","author_association":"MEMBER","body":">And that is supposed to be a convenient solution? \r\n\r\nNo one ever said that, but it is the right tool for your question in https://github.com/qbittorrent/qBittorrent/issues/1376#issuecomment-350046323 .\r\n\r\nAnd for your original target \"Please at least add an option to run the installer without administrator privileges\", you should file an exclusive issue for that."}}
{"actor":{"display_login":"Chocobo1"}}